Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename

To: "Alexey Feldgendler" <feldgendler@feldgendler.plesk.ru>, <327019@bugs.debian.org>
Subject: Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename
From: "Adam D. Barratt" <debian-bts@adam-barratt.org.uk>
Date: Wed, 7 Sep 2005 08:59:15 +0100
Message-id: <[🔎] 0dc601c5b382$0a764290$eb00010a@andromeda>
Reply-to: "Adam D. Barratt" <debian-bts@adam-barratt.org.uk>, 327019@bugs.debian.org
References: <[🔎] E1ECsbL-000879-1H@localhost>

On Wednesday, September 07, 2005 6:36 AM, Alexey Feldgendler
<feldgendler@feldgendler.plesk.ru> wrote:

> Package: ssh
> Version: 1:3.8.1p1-8.sarge.4
> Severity: critical
>
> Here is my testcase:
>
> $ scp remotehost@';uname -a'

scp [user]@remotehost:';uname -a', surely?

Regards,

Adam

Reply to:

References:
- Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename
  - From: Alexey Feldgendler <feldgendler@feldgendler.plesk.ru>

Prev by Date: Bug#242236: fixed with #248125?
Next by Date: Processed: According to Mickael Marchand
Previous by thread: Processed: Re: Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename
Next by thread: Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename
Index(es):
- Date
- Thread